Privacy Policy

Collected directly from you:

• Sign-up: email address, nickname, social login identifier, date of birth (used to verify age and block sign-ups under 14)
• Service use: pet information, uploaded photos and videos, photo journal content
• Payments: transaction records (card details are handled by the payment processor and are not stored by Ongi)

Collected automatically:

• IP address, cookies, service usage and access logs, device and browser information

Identifying and managing accounts, verifying age (blocking sign-ups under 14), providing the service (photo journals, digital frame connections, AI video generation), processing payments and refunds, responding to customer inquiries, preventing misuse, and meeting legal obligations.

When you use neighborhood meetups, we process the neighborhood name you enter or confirm, meetup name, date and time, place, capacity and description, host and applicant identifiers, request, approval, rejection and cancellation status, and request and decision times. We also use the date of birth already held for your account to check that you are at least 19. We use this information to find and manage meetups, manage participation status and related history.

When you open ‘My neighborhood’, acknowledge the location notice and grant location permission, Ongi obtains your current latitude and longitude once and sends them through its server to Kakao's administrative-region conversion API. Once you have acknowledged the notice and granted permission, opening ‘My neighborhood’ again starts another one-time lookup. Ongi does not collect location continuously or track your location in the background. If location cannot be found or permission is unavailable, the flow switches to address search. You can search by address without location permission. When you run an address search, Ongi sends the entered query through its server to Kakao's address search API. Ongi does not store coordinates, address queries or search history from these lookups in its database. Only after you confirm a candidate and tap ‘Set this neighborhood’ is the neighborhood name saved.

Meetup details, the host's nickname and participation status are shown to other members according to access permissions. Hosts can view applicant and participant information. Other participants are not given the full participant list or another member's date of birth. Check what will be visible to others before posting meetup information or applying to join.

We entrust the following work so that the service can run smoothly.

• Toss Payments Co., Ltd. — payment processing and cancellation
• BytePlus (ByteDance group) — AI video generation
• Google (Google Cloud Vision API) — safety screening of uploaded images (determining whether the image shows a pet and whether it contains a human face)
• Gabia, Inc. — server and storage infrastructure operation (Korea)

Safety screening happens the moment you upload a photo (and again at the moment you request a video). Your photo is sent to the Google Cloud Vision API at that time.

Personal information may be transferred outside Korea for AI video generation and image screening, as follows.

(1) AI video generation

• Recipient: BytePlus (ByteDance group)
• Country: Singapore (ap-southeast region)
• Items transferred: pet photos you upload, and the videos generated from them
• Purpose: generating the AI video
• Timing and method: sent over an encrypted connection (HTTPS) at the moment you request a video
• Retention: until the purpose of processing is fulfilled
• Safeguards: encryption in transit and other security measures
• How to refuse: withdraw consent in Settings > Third-party AI transfer consent. Once withdrawn, no further transfer occurs for new video generation.

(2) Safety screening of uploaded images

• Recipient: Google (Google Cloud Vision API)
• Country: the United States and other Google Cloud processing regions. We use the global endpoint, which does not pin a region, so the processing country is not determined.
• Items transferred: photos you upload
• Purpose: safety screening (determining whether the image shows a pet and whether it contains a human face)
• Timing and method: sent over an encrypted connection (HTTPS) immediately on upload, and again if you request a video
• Retention: until the screening purpose is fulfilled
• Safeguards: encryption in transit and other security measures
• How to refuse: do not upload photos, and no transfer occurs.

Our other infrastructure (Gabia and Toss Payments) processes data within Korea.

We do not provide your personal information to third parties. The only exceptions are where the law requires it or where you have given separate consent.

We do not sell or share your personal information, and we do not use it for cross-app tracking or targeted advertising. California residents can review this at /ccpa-do-not-sell.

We delete your personal information without delay when you close your account. We keep the following for the periods Korean law requires.

• Records of contracts and withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records of payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records of consumer complaints and dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce)
• Access logs (login records): 3 months (Protection of Communications Secrets Act)

• When we delete: without delay once the retention period passes or the purpose of processing is fulfilled
• How we delete: account and sign-in credentials, device tokens, and your reaction and visit records are removed from the database. Spaces, records, letters, posts and pet profiles you wrote are marked deleted so they can no longer be seen in the service, and the photo and video files you uploaded are deleted from storage. Printed material is shredded or incinerated.

Ongi is not available to anyone under 14. We ask for your date of birth at sign-up, and if it shows you are under 14 the account is deleted and access is refused. If you believe a child under 14 has created an account, contact us at yangheejune@gmail.com and we will delete it.

You may ask to access, correct, delete, or stop the processing of your personal information. We act on your request within 10 days.

• How to ask: email yangheejune@gmail.com, or write to us
• Deleting your account: you can delete it yourself from the Settings screen, and deletion starts as soon as you confirm. If you cannot sign in and use the web deletion request form instead, we verify that the account is yours and then delete it within 30 days.
• To appeal or report: Personal Information Protection Commission (pipc.go.kr), Korea Internet & Security Agency privacy center (privacy.kisa.or.kr, 118 in Korea)

• Encryption in transit (HTTPS)
• One-way hashing of passwords
• Access rights management and access control
• Retention of access records and protection against tampering

• Name 김민지 · Title Representative
• Email yangheejune@gmail.com · Phone 010-6458-7637

Ongi is operated from the Republic of Korea, and this policy follows Korean privacy law. This English text states the same substance as the Korean policy. If the two ever differ, the Korean version governs.

We may revise this policy as the law or the service changes. When we do, we will announce the effective date and what changed through an in-service notice before it takes effect.